Privacy Policy

Last updated: 7 August 2026

This policy explains how Tactiq collects, uses and protects personal data when you use the Tactiq app and this website (the "Service"). It is written to meet the UK GDPR and the Data Protection Act 2018.

1. Who we are

Tactiq is the data controller for the personal data described in this policy.

Contact: tactiqclub@gmail.com

We have not appointed a Data Protection Officer, as we are not required to. For any privacy question, use the contact address above.

Tactiq is offered to clubs in the United Kingdom. If you use it from elsewhere, your data is still handled as described here.

Purpose | Lawful basis
Running your account and providing the app: scheduling, availability, squads, results, duties and messaging | Performance of a contract
Processing payments between you and your club through Stripe | Performance of a contract
Sending push notifications, in-app notifications and reminders | Performance of a contract
Sending email notifications and the weekly digest | Consent, which you give by turning them on
Account emails such as password resets and email verification | Performance of a contract
Keeping the Service safe: content screening, reviewing reports, acting on abuse | Legitimate interests in protecting users, particularly young people
Product analytics and fixing errors | Legitimate interests in improving and maintaining the Service
Meeting legal, tax and accounting obligations | Legal obligation

Account details. Your name, email address, and either a password we store only as a secure hash, or the account identifier from your Google or Apple sign-in.

Club and playing profile. The club and teams you belong to, your role, your playing position and squad number, whether you are recorded as a player, and your availability responses.

Activity in the club. Squad selections you appear in, match results and statistics recorded against you, appearances, disciplinary records such as cards or suspensions, and any volunteer duties assigned to you.

Guardian links. Where a club admin links a parent or guardian to a young player, we store that relationship and which admin created it.

Messages. The content of messages, broadcasts and thread posts you send, and any reports you make about other people's messages.

Payments. Payment requests raised against you, their amounts and status, and whether they were paid by card or recorded as cash or bank transfer. We never see or store card numbers. Card details go directly to Stripe.

Technical and usage data. Your device type, operating system and app version, a push notification token if you enable notifications, product analytics events about which features are used, and error diagnostics if the app crashes.

We do not collect your date of birth, phone number, postal address, emergency contact details, health or medical information, or your location.

Where we rely on legitimate interests, we have considered the impact on you and concluded our interest does not override your rights. You can object at any time; see section 8.

Within your club. Tactiq is a club app, so other members see information you share in it. Members can see your name, role, availability and the messages you send in shared threads. Coaches and managers see squad and stat information for their teams. Treasurers and admins see payment status. Guardians see the data of players they are linked to.

Our service providers. These process data on our instructions only.

We do not sell your personal data, and we do not use it for advertising.

4. Who we share data with (subprocessors)

Our hosting, email, analytics and error reporting providers process data outside the United Kingdom, including in the United States. Where data leaves the UK we rely on an appropriate safeguard, usually the UK International Data Transfer Addendum to the European Commission's Standard Contractual Clauses, or the provider's certification under the UK extension to the EU-US Data Privacy Framework. Email us for details of the safeguards for a specific provider.

5. International data transfers

Tactiq is a service for sports clubs, and clubs include children. It is not designed for children to discover and sign up to on their own: people join because a club admin invites them or approves a request.

You must be 13 or over to hold your own Tactiq account. We do not ask for your date of birth, so we rely on you and on your club to observe that. If you tell us an account belongs to someone under 13, we will remove it.

Where a member is a child, the club is responsible for having the consent it needs from a parent or guardian before adding that child to Tactiq, in the same way it does for any other club activity. A club admin can link a parent or guardian to a young player, and that guardian can then set availability, view fees and receive notifications for them.

A parent or guardian can ask us at any time to review, correct or delete a child's data. Contact your club admin, or email tactiqclub@gmail.com and we will act on it.

We apply the principles of the ICO's Age Appropriate Design Code: we collect the minimum data needed, we do not profile children, we do not advertise to anyone, and we do not sell data.

6. Children’s data

While your account is open, we keep your data for as long as you use the Service.

When you delete your account, your personal profile is anonymised immediately. Your name and email are replaced, your password, push token and calendar link are destroyed, your Google and Apple sign-in links are removed, and you are taken off every roster, squad and conversation.

Some records stay with your club, because they are the club's records as much as yours and removing them would corrupt other members' history. These are no longer linked to your name or email:

• messages you sent, which remain in club and team threads
• payment requests and their status, which the club needs for its accounts
• match results, appearances and statistics
• disciplinary records
• reports and moderation decisions, which we keep so repeat behaviour stays visible

Backups. Our backups are overwritten on a rolling cycle, so data can persist in a backup for up to [NUMBER] days after deletion.

Stripe holds payment and transaction records under its own retention rules, as it is required to for tax, accounting and fraud prevention.

If you own a club, you cannot delete your account until you transfer ownership of that club or delete the club, because deleting it would leave the club without an owner. See our account deletion page.

Parents/Guardians may edit or wipe a child's record through settings or via direct support. Contact us at tactiqclub@gmail.com

7. How long we keep data

We keep personal data only as long as needed. Account and profile data is deleted from our active systems within 30 days of account deletion, and purged from our backups within 30 days. We do not store card or payment-card details — payment and transaction records are held by Stripe, which retains them as required for tax, accounting and fraud-prevention purposes under its own terms and applicable law.

8. Your rights

Depending on where you live, you have rights over your personal data. Under the UK/EU GDPR these include access, rectification, erasure, restriction, objection, portability, and withdrawing consent. Under the CCPA/CPRA, California residents have the right to know, delete, correct, opt out of sale/sharing, and not be discriminated against for exercising these rights. To exercise any right, email tactiqclub@gmail.com or use the in-app controls. To delete your account, see app.tactiqclub.com/delete-account. We will verify your identity before acting on a request and respond within the timeframe the law requires.

9. California (CCPA/CPRA) disclosures

In the past 12 months we have collected the categories of data described in Section 2 (identifiers, commercial information, internet/usage activity, and the relationship data needed for guardian links), for the purposes in Section 3, and shared it with the providers in Section 4. We do not sell personal information, and we do not knowingly sell or share the personal information of consumers under 16. If our analytics activity (e.g. PostHog) is ever configured in a way that amounts to “sharing” for cross-context behavioural advertising under the CPRA, we will provide a “Do Not Sell or Share My Personal Information” option. As currently configured, we use analytics only to operate and improve the Service.

10. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and hashed passwords — to protect personal data. No system is perfectly secure, but we work to protect your information and will notify you and the ICO of a breach where the law requires.

11. Changes to this policy

We may update this policy from time to time. We will post the new version here with an updated date and, for significant changes, notify you in the app or by email.

12. How to contact us or complain

Questions or requests: tactiqclub@gmail.com. If you are in the UK and unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk. If you are in the EU, you can complain to your local data protection authority. We’d appreciate the chance to address your concern first.